From the 2MNY engineering team

OWASP Articles

OWASP Top 10 and web application security.

All AI & LLM Security 1 API Security 2 Attack Surface 3 DNS Security 2 HTTP Headers 1 Monitoring 2 OWASP 4 Product Updates 6 Small Business 1 SSL/TLS 1 Supply Chain Security 2 Threat Intelligence 2 Website Security 7 WordPress Security 1

OWASP

Clickjacking, CORS Misconfiguration and CSRF: Logic Bugs Scans Catch

Clickjacking, CORS misconfigurations and CSRF are the classic web logic bugs — individually moderate, devastating in combination. Here's how each works and how scanning catches them.

2MNY Admin • Oct 11, 2026 • 5 min read

OWASP

Cross-Site Scripting (XSS): Types, Examples, and How Scanners Find Them

Cross-site scripting lets attackers run their own JavaScript in your visitors' browsers. Here are the three XSS types, the modern DOM-level variants, and how scanners catch them.

2MNY Admin • Oct 11, 2026 • 4 min read

OWASP

What Is SQL Injection? How Scanners Detect and Prove SQLi

SQL injection remains one of the most damaging web vulnerabilities. Here is how it works, why it survives in 2026, and how modern scanners detect it — and prove it — safely.

2MNY Admin • Oct 11, 2026 • 5 min read

OWASP

OWASP Top 10: Understanding Web Application Security Risks

The OWASP Top 10 is the industry-standard awareness document for web application security risks. Here is what each of the ten risks means, how sites get exploited, and where to start fixing.

2MNY Admin • Jul 03, 2026 • 3 min read

Put the reading to work

Run a free scan and see which of the issues we write about are live on your website right now.

Start Free Scan